GSS module for proftpd / News: Recent posts

This project has now moved to git ( here and github)

A new version of the GSS/Kerberos module for proftpd has been released. It support proftpd 1.3.0 with MIT, Heimdal, Sun's SEAM or IBM's NAS Kerberos implementation.

Markus

Updated to support proftpd 1.2.10 and added support for OS based Kerberos (e.g. SEAM/Solaris NAS/AIX)

The gssapi module verison 1.2.3 has been released, which contains small patches and is comptabile with proftpd release 1.2.20

Updated GSSAPI module for proftpd with flag for NoChannelBinding to support firewalls with NAT.

Version 1.0.3 released, which is compatible with proftpd 1.2.9rc1

Patches for the Heimdal and MIT ftp clients are provided for mod_gss 1.0.2 to support gss ftp through stateful inspection firewalls

The new release mod_gss 1.0.2 has two new options AllowCCC and AllowFWCCC.

Together with the yafc client from http://sourceforge.net/projects/yafc/ and the provided yafc patch a statful firewall like Checkpoint should still be able to firewall the secure ftp traffic. This is possible because the PORT/PASV command information will not be protected to allow the firewall inspection of the required port information.